764 matches found
CVE-2022-27907: Server-Side Request Forgery (SSRF)
Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...
CVE-2021-43961
Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...
CVE-2021-43961
Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...
CVE-2021-43961
Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...
Design/Logic Flaw
Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...
CVE-2021-43961
CVE-2021-43961 affects Sonatype Nexus Repository Manager 3.36.0 (NXS/NXRM). The connected sources specify a HTML Injection vulnerability in this version. No exploit vectors, exploit status, or remediation details are provided in the available documents. The reports consistently describe the issue...
CVE-2021-43961
Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...
CVE-2021-43961: Improper Neutralization of Input During Web Page Generation
Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...
PT-2022-11958
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager version 3.36.0 Description The issue allows for HTML Injection. Recommendations For Sonatype Nexus Repository Manager version 3.36.0, at the moment, there is no information about a newer version that contains ...
Sonatype Nexus Repository Manager cross-site scripting vulnerabilities
Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A cross-site scripting vulnerability exists in Sonatype Nexus Repository Manager 3.x through 3.37.0. A remote attacker sending a specially...
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution...
Sonatype Nexus Repository Manager Code Execution
The vulnerability of Sonatype Nexus Repository Manager is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request remotely...
CVE-2021-43293
Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF...
CVE-2021-43293
Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF...
Server side request forgery (ssrf)
Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF...
CVE-2021-43293
Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF...
PT-2021-23805
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.36.0 Description The issue allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF. This means an attacker could exploit the...
CVE-2021-43293: Server-Side Request Forgery (SSRF)
Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF...
Sonatype Nexus Repository code-related vulnerabilities
Sonatype Nexus Repository is a repository manager from Sonatype, Inc. that is used for managing, storing, and distributing software, among other things. A security vulnerability exists in Sonatype Nexus Repository 3, which stems from a lack of validation and filtering of user-submitted input on t...